Description
The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Weekly Schedule | 3.4.3 – < 3.4.3 | 3.4.3 |